{
  "document_type": "INTERNAL_STAND_TEST_PASSPORT",
  "system_name": "INDRA (Invariant-guided Neural Discovery, Reconnaissance & Attack-synthesis)",
  "product_acronym": "ИНДРА",
  "legal_disclaimer": "Внутренний протокол заводских испытаний стенда разработчика; не заменяет государственный сертификат соответствия ФСТЭК России.",
  "regulatory_framework": [
    "ГОСТ Р 56939-2024: Защита информации. Разработка безопасного ПО",
    "Приказ ФСТЭК России № 117 от 11.04.2025: Требования по безопасности информации к средствам ИИ"
  ],
  "timestamp_utc": "2026-10-25T06:23:34.061199+00:00",
  "overall_status": "CONFORMANT_GREEN",
  "coverage_percentage": 100.0,
  "auto_scan_classes_total": 7,
  "auto_scan_classes_verified": 7,
  "lab_only_classes_total": 1,
  "stand_sample_size": 28,
  "confusion_matrix": {
    "TP": 14,
    "FP": 0,
    "TN": 14,
    "FN": 0
  },
  "measured_fpr_pct": 0.0,
  "measured_fnr_pct": 0.0,
  "hash_algorithm": "ГОСТ Р 34.11-2012 (Стрибог-256)",
  "journal_integrity": "PASS_VERIFIED",
  "classes": [
    {
      "class_code": "INJ-SQL",
      "vuln_type": "sql_injection",
      "scan_mode": "AUTO_SCAN",
      "name": "Внедрение кода в команды СУБД (SQL Injection)",
      "standard_ref": "ГОСТ Р 56939-2024 §6.4.2; Приказ ФСТЭК № 117 п. 4",
      "status": "PASSED_GREEN",
      "stand_tp": 2,
      "stand_fp": 0,
      "stand_tn": 2,
      "stand_fn": 0,
      "measured_fpr_pct": 0.0,
      "measured_fnr_pct": 0.0,
      "zero_damage_guaranteed": true,
      "immune_patch_rule": "IMMUNE-SQL-85DE2412",
      "immune_patch_latency_sec": 1e-05,
      "witness_hash": "85de2412c34d4965"
    },
    {
      "class_code": "INJ-CMD",
      "vuln_type": "command_injection",
      "scan_mode": "AUTO_SCAN",
      "name": "Внедрение команд операционной системы (Command Injection)",
      "standard_ref": "ГОСТ Р 56939-2024 §6.4.3; Приказ ФСТЭК № 117 п. 4",
      "status": "PASSED_GREEN",
      "stand_tp": 2,
      "stand_fp": 0,
      "stand_tn": 2,
      "stand_fn": 0,
      "measured_fpr_pct": 0.0,
      "measured_fnr_pct": 0.0,
      "zero_damage_guaranteed": true,
      "immune_patch_rule": "IMMUNE-CMD-E22A4527",
      "immune_patch_latency_sec": 2e-05,
      "witness_hash": "e22a45273df881ef"
    },
    {
      "class_code": "DIR-TRV",
      "vuln_type": "path_traversal",
      "scan_mode": "AUTO_SCAN",
      "name": "Нарушение изоляции файловой системы (Path Traversal)",
      "standard_ref": "ГОСТ Р 56939-2024 §6.4.4; Приказ ФСТЭК № 117 п. 4",
      "status": "PASSED_GREEN",
      "stand_tp": 2,
      "stand_fp": 0,
      "stand_tn": 2,
      "stand_fn": 0,
      "measured_fpr_pct": 0.0,
      "measured_fnr_pct": 0.0,
      "zero_damage_guaranteed": true,
      "immune_patch_rule": "IMMUNE-FS-A17DFC4A",
      "immune_patch_latency_sec": 1e-05,
      "witness_hash": "a17dfc4aef33a97d"
    },
    {
      "class_code": "AUTH-BOLA",
      "vuln_type": "idor_bola",
      "scan_mode": "AUTO_SCAN",
      "name": "Неправомерный доступ к объектам данных (BOLA / IDOR)",
      "standard_ref": "ГОСТ Р 56939-2024 §6.5.1; Приказ ФСТЭК № 117 п. 4",
      "status": "PASSED_GREEN",
      "stand_tp": 2,
      "stand_fp": 0,
      "stand_tn": 2,
      "stand_fn": 0,
      "measured_fpr_pct": 0.0,
      "measured_fnr_pct": 0.0,
      "zero_damage_guaranteed": true,
      "immune_patch_rule": "IMMUNE-BOLA-E3FF9C8C",
      "immune_patch_latency_sec": 2e-05,
      "witness_hash": "e3ff9c8cdc04a3d1"
    },
    {
      "class_code": "SSRF-INT",
      "vuln_type": "ssrf",
      "scan_mode": "AUTO_SCAN",
      "name": "Подделка запросов на стороне сервера (SSRF)",
      "standard_ref": "ГОСТ Р 56939-2024 §6.4.5; Приказ ФСТЭК № 117 п. 4",
      "status": "PASSED_GREEN",
      "stand_tp": 2,
      "stand_fp": 0,
      "stand_tn": 2,
      "stand_fn": 0,
      "measured_fpr_pct": 0.0,
      "measured_fnr_pct": 0.0,
      "zero_damage_guaranteed": true,
      "immune_patch_rule": "IMMUNE-SSRF-27590590",
      "immune_patch_latency_sec": 2e-05,
      "witness_hash": "275905904349f049"
    },
    {
      "class_code": "SEC-LEAK",
      "vuln_type": "secret_exposure",
      "scan_mode": "AUTO_SCAN",
      "name": "Утечка аутентификационных токенов и секретов (Secret Exposure)",
      "standard_ref": "ГОСТ Р 56939-2024 §6.3.2; Приказ ФСТЭК № 117 п. 4",
      "status": "PASSED_GREEN",
      "stand_tp": 2,
      "stand_fp": 0,
      "stand_tn": 2,
      "stand_fn": 0,
      "measured_fpr_pct": 0.0,
      "measured_fnr_pct": 0.0,
      "zero_damage_guaranteed": true,
      "immune_patch_rule": "IMMUNE-SEC-2C95EAB4",
      "immune_patch_latency_sec": 2e-05,
      "witness_hash": "2c95eab46a673898"
    },
    {
      "class_code": "HDR-SEC",
      "vuln_type": "missing_security_headers",
      "scan_mode": "AUTO_SCAN",
      "name": "Отсутствие защитных заголовков безопасности (Missing Security Headers)",
      "standard_ref": "ГОСТ Р 56939-2024 §6.3.4; Приказ ФСТЭК № 117 п. 4",
      "status": "PASSED_GREEN",
      "stand_tp": 2,
      "stand_fp": 0,
      "stand_tn": 2,
      "stand_fn": 0,
      "measured_fpr_pct": 0.0,
      "measured_fnr_pct": 0.0,
      "zero_damage_guaranteed": true,
      "immune_patch_rule": "IMMUNE-HDR-82F5EB1F",
      "immune_patch_latency_sec": 2e-05,
      "witness_hash": "82f5eb1f4842ff2b"
    }
  ],
  "lab_only_classes": [
    {
      "class_code": "DOS-RSRC",
      "vuln_type": "dos_resource",
      "scan_mode": "LAB_ONLY",
      "name": "Истощение вычислительных ресурсов (Resource Exhaustion / DoS)",
      "standard_ref": "ГОСТ Р 56939-2024 §6.6.1; Приказ ФСТЭК № 117 п. 4",
      "status": "LAB_GUARDED",
      "zero_damage_rule": "SEC-ZD-DOS-01",
      "immune_patch_rule": "IMMUNE-DOS-CF88675B"
    }
  ]
}